Vulnerability Details CVE-2019-3911
Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r2/query endpoints.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.086
EPSS Ranking 91.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2019-3911
-
cpe:2.3:a:labkey:labkey_server:*